Reference
resolver
Takes precedence over the value obtained from the operator
if defined.
If a string value is used, it must be MEMORY
or URL(<url>)
where where url
is an HTTP endpoint pointing to the NATS account resolver.
Note: the NATS account resolver is deprecated and the built-in NATS-based resolver should be used.
- Default value: n/a
- Hot reloadable: Yes. Note, enabling or disabling a resolver requires full server restart.
- Aliases:
account_resolver
,account_resolvers
Values
Type | Description | Choices |
---|---|---|
string | - | |
object | An object with a set of explicit properties that can be set. | - |
Properties
Name | Description | Type | Default |
---|---|---|---|
type | Defines whether the resolver type. A full resolver stores all account JWTs unless they are explicitly deleted. A cache resolver stores only a subset based on a least-recently-used (LRU) TTL. | string | - |
dir | The path to storing account JWT files when pushed to the server. | string | - |
limit | If set, limit the number of stored JWTs. In full mode, new JWTs will be rejected where as in cache mode, old JWTs will be evicted for new JWTs. | integer | - |
ttl | If cache mode, defines how long an account JWT will be cached for before being considered for auto-eviction. | duration | - |
interval | Defines the interval the resolver will randomly contact another server to reconcile JWTs, such as receiving new ones and deleting old ones. Applies to full mode only. | duration | - |
timeout | Defines the request timeout for resolvers interacting with with other resolvers. | duration | - |
allow_delete | If true, allows JWTs to be deleted. Note, in full mode, this will result in the JWT file being renamed to with a .delete suffix, unless hard_delete is true. | boolean | false |
hard_delete | If true, and the resolver is in full mode, deleted account JWTs will be removed from disk rather than having the .delete suffix appended. | boolean | false |